Back to home page

OSCL-LXR

 
 

    


0001 // SPDX-License-Identifier: GPL-2.0
0002 /*
0003  * Driver for s390 chsc subchannels
0004  *
0005  * Copyright IBM Corp. 2008, 2011
0006  *
0007  * Author(s): Cornelia Huck <cornelia.huck@de.ibm.com>
0008  *
0009  */
0010 
0011 #include <linux/slab.h>
0012 #include <linux/compat.h>
0013 #include <linux/device.h>
0014 #include <linux/module.h>
0015 #include <linux/uaccess.h>
0016 #include <linux/miscdevice.h>
0017 #include <linux/kernel_stat.h>
0018 
0019 #include <asm/cio.h>
0020 #include <asm/chsc.h>
0021 #include <asm/isc.h>
0022 
0023 #include "cio.h"
0024 #include "cio_debug.h"
0025 #include "css.h"
0026 #include "chsc_sch.h"
0027 #include "ioasm.h"
0028 
0029 static debug_info_t *chsc_debug_msg_id;
0030 static debug_info_t *chsc_debug_log_id;
0031 
0032 static struct chsc_request *on_close_request;
0033 static struct chsc_async_area *on_close_chsc_area;
0034 static DEFINE_MUTEX(on_close_mutex);
0035 
0036 #define CHSC_MSG(imp, args...) do {                 \
0037         debug_sprintf_event(chsc_debug_msg_id, imp , ##args);   \
0038     } while (0)
0039 
0040 #define CHSC_LOG(imp, txt) do {                 \
0041         debug_text_event(chsc_debug_log_id, imp , txt); \
0042     } while (0)
0043 
0044 static void CHSC_LOG_HEX(int level, void *data, int length)
0045 {
0046     debug_event(chsc_debug_log_id, level, data, length);
0047 }
0048 
0049 MODULE_AUTHOR("IBM Corporation");
0050 MODULE_DESCRIPTION("driver for s390 chsc subchannels");
0051 MODULE_LICENSE("GPL");
0052 
0053 static void chsc_subchannel_irq(struct subchannel *sch)
0054 {
0055     struct chsc_private *private = dev_get_drvdata(&sch->dev);
0056     struct chsc_request *request = private->request;
0057     struct irb *irb = this_cpu_ptr(&cio_irb);
0058 
0059     CHSC_LOG(4, "irb");
0060     CHSC_LOG_HEX(4, irb, sizeof(*irb));
0061     inc_irq_stat(IRQIO_CSC);
0062 
0063     /* Copy irb to provided request and set done. */
0064     if (!request) {
0065         CHSC_MSG(0, "Interrupt on sch 0.%x.%04x with no request\n",
0066              sch->schid.ssid, sch->schid.sch_no);
0067         return;
0068     }
0069     private->request = NULL;
0070     memcpy(&request->irb, irb, sizeof(*irb));
0071     cio_update_schib(sch);
0072     complete(&request->completion);
0073     put_device(&sch->dev);
0074 }
0075 
0076 static int chsc_subchannel_probe(struct subchannel *sch)
0077 {
0078     struct chsc_private *private;
0079     int ret;
0080 
0081     CHSC_MSG(6, "Detected chsc subchannel 0.%x.%04x\n",
0082          sch->schid.ssid, sch->schid.sch_no);
0083     sch->isc = CHSC_SCH_ISC;
0084     private = kzalloc(sizeof(*private), GFP_KERNEL);
0085     if (!private)
0086         return -ENOMEM;
0087     dev_set_drvdata(&sch->dev, private);
0088     ret = cio_enable_subchannel(sch, (u32)(unsigned long)sch);
0089     if (ret) {
0090         CHSC_MSG(0, "Failed to enable 0.%x.%04x: %d\n",
0091              sch->schid.ssid, sch->schid.sch_no, ret);
0092         dev_set_drvdata(&sch->dev, NULL);
0093         kfree(private);
0094     }
0095     return ret;
0096 }
0097 
0098 static void chsc_subchannel_remove(struct subchannel *sch)
0099 {
0100     struct chsc_private *private;
0101 
0102     cio_disable_subchannel(sch);
0103     private = dev_get_drvdata(&sch->dev);
0104     dev_set_drvdata(&sch->dev, NULL);
0105     if (private->request) {
0106         complete(&private->request->completion);
0107         put_device(&sch->dev);
0108     }
0109     kfree(private);
0110 }
0111 
0112 static void chsc_subchannel_shutdown(struct subchannel *sch)
0113 {
0114     cio_disable_subchannel(sch);
0115 }
0116 
0117 static struct css_device_id chsc_subchannel_ids[] = {
0118     { .match_flags = 0x1, .type =SUBCHANNEL_TYPE_CHSC, },
0119     { /* end of list */ },
0120 };
0121 MODULE_DEVICE_TABLE(css, chsc_subchannel_ids);
0122 
0123 static struct css_driver chsc_subchannel_driver = {
0124     .drv = {
0125         .owner = THIS_MODULE,
0126         .name = "chsc_subchannel",
0127     },
0128     .subchannel_type = chsc_subchannel_ids,
0129     .irq = chsc_subchannel_irq,
0130     .probe = chsc_subchannel_probe,
0131     .remove = chsc_subchannel_remove,
0132     .shutdown = chsc_subchannel_shutdown,
0133 };
0134 
0135 static int __init chsc_init_dbfs(void)
0136 {
0137     chsc_debug_msg_id = debug_register("chsc_msg", 8, 1, 4 * sizeof(long));
0138     if (!chsc_debug_msg_id)
0139         goto out;
0140     debug_register_view(chsc_debug_msg_id, &debug_sprintf_view);
0141     debug_set_level(chsc_debug_msg_id, 2);
0142     chsc_debug_log_id = debug_register("chsc_log", 16, 1, 16);
0143     if (!chsc_debug_log_id)
0144         goto out;
0145     debug_register_view(chsc_debug_log_id, &debug_hex_ascii_view);
0146     debug_set_level(chsc_debug_log_id, 2);
0147     return 0;
0148 out:
0149     debug_unregister(chsc_debug_msg_id);
0150     return -ENOMEM;
0151 }
0152 
0153 static void chsc_remove_dbfs(void)
0154 {
0155     debug_unregister(chsc_debug_log_id);
0156     debug_unregister(chsc_debug_msg_id);
0157 }
0158 
0159 static int __init chsc_init_sch_driver(void)
0160 {
0161     return css_driver_register(&chsc_subchannel_driver);
0162 }
0163 
0164 static void chsc_cleanup_sch_driver(void)
0165 {
0166     css_driver_unregister(&chsc_subchannel_driver);
0167 }
0168 
0169 static DEFINE_SPINLOCK(chsc_lock);
0170 
0171 static int chsc_subchannel_match_next_free(struct device *dev, const void *data)
0172 {
0173     struct subchannel *sch = to_subchannel(dev);
0174 
0175     return sch->schib.pmcw.ena && !scsw_fctl(&sch->schib.scsw);
0176 }
0177 
0178 static struct subchannel *chsc_get_next_subchannel(struct subchannel *sch)
0179 {
0180     struct device *dev;
0181 
0182     dev = driver_find_device(&chsc_subchannel_driver.drv,
0183                  sch ? &sch->dev : NULL, NULL,
0184                  chsc_subchannel_match_next_free);
0185     return dev ? to_subchannel(dev) : NULL;
0186 }
0187 
0188 /**
0189  * chsc_async() - try to start a chsc request asynchronously
0190  * @chsc_area: request to be started
0191  * @request: request structure to associate
0192  *
0193  * Tries to start a chsc request on one of the existing chsc subchannels.
0194  * Returns:
0195  *  %0 if the request was performed synchronously
0196  *  %-EINPROGRESS if the request was successfully started
0197  *  %-EBUSY if all chsc subchannels are busy
0198  *  %-ENODEV if no chsc subchannels are available
0199  * Context:
0200  *  interrupts disabled, chsc_lock held
0201  */
0202 static int chsc_async(struct chsc_async_area *chsc_area,
0203               struct chsc_request *request)
0204 {
0205     int cc;
0206     struct chsc_private *private;
0207     struct subchannel *sch = NULL;
0208     int ret = -ENODEV;
0209     char dbf[10];
0210 
0211     chsc_area->header.key = PAGE_DEFAULT_KEY >> 4;
0212     while ((sch = chsc_get_next_subchannel(sch))) {
0213         spin_lock(sch->lock);
0214         private = dev_get_drvdata(&sch->dev);
0215         if (private->request) {
0216             spin_unlock(sch->lock);
0217             ret = -EBUSY;
0218             continue;
0219         }
0220         chsc_area->header.sid = sch->schid;
0221         CHSC_LOG(2, "schid");
0222         CHSC_LOG_HEX(2, &sch->schid, sizeof(sch->schid));
0223         cc = chsc(chsc_area);
0224         snprintf(dbf, sizeof(dbf), "cc:%d", cc);
0225         CHSC_LOG(2, dbf);
0226         switch (cc) {
0227         case 0:
0228             ret = 0;
0229             break;
0230         case 1:
0231             sch->schib.scsw.cmd.fctl |= SCSW_FCTL_START_FUNC;
0232             ret = -EINPROGRESS;
0233             private->request = request;
0234             break;
0235         case 2:
0236             ret = -EBUSY;
0237             break;
0238         default:
0239             ret = -ENODEV;
0240         }
0241         spin_unlock(sch->lock);
0242         CHSC_MSG(2, "chsc on 0.%x.%04x returned cc=%d\n",
0243              sch->schid.ssid, sch->schid.sch_no, cc);
0244         if (ret == -EINPROGRESS)
0245             return -EINPROGRESS;
0246         put_device(&sch->dev);
0247         if (ret == 0)
0248             return 0;
0249     }
0250     return ret;
0251 }
0252 
0253 static void chsc_log_command(void *chsc_area)
0254 {
0255     char dbf[10];
0256 
0257     snprintf(dbf, sizeof(dbf), "CHSC:%x", ((uint16_t *)chsc_area)[1]);
0258     CHSC_LOG(0, dbf);
0259     CHSC_LOG_HEX(0, chsc_area, 32);
0260 }
0261 
0262 static int chsc_examine_irb(struct chsc_request *request)
0263 {
0264     int backed_up;
0265 
0266     if (!(scsw_stctl(&request->irb.scsw) & SCSW_STCTL_STATUS_PEND))
0267         return -EIO;
0268     backed_up = scsw_cstat(&request->irb.scsw) & SCHN_STAT_CHAIN_CHECK;
0269     request->irb.scsw.cmd.cstat &= ~SCHN_STAT_CHAIN_CHECK;
0270     if (scsw_cstat(&request->irb.scsw) == 0)
0271         return 0;
0272     if (!backed_up)
0273         return 0;
0274     if (scsw_cstat(&request->irb.scsw) & SCHN_STAT_PROG_CHECK)
0275         return -EIO;
0276     if (scsw_cstat(&request->irb.scsw) & SCHN_STAT_PROT_CHECK)
0277         return -EPERM;
0278     if (scsw_cstat(&request->irb.scsw) & SCHN_STAT_CHN_DATA_CHK)
0279         return -EAGAIN;
0280     if (scsw_cstat(&request->irb.scsw) & SCHN_STAT_CHN_CTRL_CHK)
0281         return -EAGAIN;
0282     return -EIO;
0283 }
0284 
0285 static int chsc_ioctl_start(void __user *user_area)
0286 {
0287     struct chsc_request *request;
0288     struct chsc_async_area *chsc_area;
0289     int ret;
0290     char dbf[10];
0291 
0292     if (!css_general_characteristics.dynio)
0293         /* It makes no sense to try. */
0294         return -EOPNOTSUPP;
0295     chsc_area = (void *)get_zeroed_page(GFP_DMA | GFP_KERNEL);
0296     if (!chsc_area)
0297         return -ENOMEM;
0298     request = kzalloc(sizeof(*request), GFP_KERNEL);
0299     if (!request) {
0300         ret = -ENOMEM;
0301         goto out_free;
0302     }
0303     init_completion(&request->completion);
0304     if (copy_from_user(chsc_area, user_area, PAGE_SIZE)) {
0305         ret = -EFAULT;
0306         goto out_free;
0307     }
0308     chsc_log_command(chsc_area);
0309     spin_lock_irq(&chsc_lock);
0310     ret = chsc_async(chsc_area, request);
0311     spin_unlock_irq(&chsc_lock);
0312     if (ret == -EINPROGRESS) {
0313         wait_for_completion(&request->completion);
0314         ret = chsc_examine_irb(request);
0315     }
0316     /* copy area back to user */
0317     if (!ret)
0318         if (copy_to_user(user_area, chsc_area, PAGE_SIZE))
0319             ret = -EFAULT;
0320 out_free:
0321     snprintf(dbf, sizeof(dbf), "ret:%d", ret);
0322     CHSC_LOG(0, dbf);
0323     kfree(request);
0324     free_page((unsigned long)chsc_area);
0325     return ret;
0326 }
0327 
0328 static int chsc_ioctl_on_close_set(void __user *user_area)
0329 {
0330     char dbf[13];
0331     int ret;
0332 
0333     mutex_lock(&on_close_mutex);
0334     if (on_close_chsc_area) {
0335         ret = -EBUSY;
0336         goto out_unlock;
0337     }
0338     on_close_request = kzalloc(sizeof(*on_close_request), GFP_KERNEL);
0339     if (!on_close_request) {
0340         ret = -ENOMEM;
0341         goto out_unlock;
0342     }
0343     on_close_chsc_area = (void *)get_zeroed_page(GFP_DMA | GFP_KERNEL);
0344     if (!on_close_chsc_area) {
0345         ret = -ENOMEM;
0346         goto out_free_request;
0347     }
0348     if (copy_from_user(on_close_chsc_area, user_area, PAGE_SIZE)) {
0349         ret = -EFAULT;
0350         goto out_free_chsc;
0351     }
0352     ret = 0;
0353     goto out_unlock;
0354 
0355 out_free_chsc:
0356     free_page((unsigned long)on_close_chsc_area);
0357     on_close_chsc_area = NULL;
0358 out_free_request:
0359     kfree(on_close_request);
0360     on_close_request = NULL;
0361 out_unlock:
0362     mutex_unlock(&on_close_mutex);
0363     snprintf(dbf, sizeof(dbf), "ocsret:%d", ret);
0364     CHSC_LOG(0, dbf);
0365     return ret;
0366 }
0367 
0368 static int chsc_ioctl_on_close_remove(void)
0369 {
0370     char dbf[13];
0371     int ret;
0372 
0373     mutex_lock(&on_close_mutex);
0374     if (!on_close_chsc_area) {
0375         ret = -ENOENT;
0376         goto out_unlock;
0377     }
0378     free_page((unsigned long)on_close_chsc_area);
0379     on_close_chsc_area = NULL;
0380     kfree(on_close_request);
0381     on_close_request = NULL;
0382     ret = 0;
0383 out_unlock:
0384     mutex_unlock(&on_close_mutex);
0385     snprintf(dbf, sizeof(dbf), "ocrret:%d", ret);
0386     CHSC_LOG(0, dbf);
0387     return ret;
0388 }
0389 
0390 static int chsc_ioctl_start_sync(void __user *user_area)
0391 {
0392     struct chsc_sync_area *chsc_area;
0393     int ret, ccode;
0394 
0395     chsc_area = (void *)get_zeroed_page(GFP_KERNEL | GFP_DMA);
0396     if (!chsc_area)
0397         return -ENOMEM;
0398     if (copy_from_user(chsc_area, user_area, PAGE_SIZE)) {
0399         ret = -EFAULT;
0400         goto out_free;
0401     }
0402     if (chsc_area->header.code & 0x4000) {
0403         ret = -EINVAL;
0404         goto out_free;
0405     }
0406     chsc_log_command(chsc_area);
0407     ccode = chsc(chsc_area);
0408     if (ccode != 0) {
0409         ret = -EIO;
0410         goto out_free;
0411     }
0412     if (copy_to_user(user_area, chsc_area, PAGE_SIZE))
0413         ret = -EFAULT;
0414     else
0415         ret = 0;
0416 out_free:
0417     free_page((unsigned long)chsc_area);
0418     return ret;
0419 }
0420 
0421 static int chsc_ioctl_info_channel_path(void __user *user_cd)
0422 {
0423     struct chsc_chp_cd *cd;
0424     int ret, ccode;
0425     struct {
0426         struct chsc_header request;
0427         u32 : 2;
0428         u32 m : 1;
0429         u32 : 1;
0430         u32 fmt1 : 4;
0431         u32 cssid : 8;
0432         u32 : 8;
0433         u32 first_chpid : 8;
0434         u32 : 24;
0435         u32 last_chpid : 8;
0436         u32 : 32;
0437         struct chsc_header response;
0438         u8 data[PAGE_SIZE - 20];
0439     } __attribute__ ((packed)) *scpcd_area;
0440 
0441     scpcd_area = (void *)get_zeroed_page(GFP_KERNEL | GFP_DMA);
0442     if (!scpcd_area)
0443         return -ENOMEM;
0444     cd = kzalloc(sizeof(*cd), GFP_KERNEL);
0445     if (!cd) {
0446         ret = -ENOMEM;
0447         goto out_free;
0448     }
0449     if (copy_from_user(cd, user_cd, sizeof(*cd))) {
0450         ret = -EFAULT;
0451         goto out_free;
0452     }
0453     scpcd_area->request.length = 0x0010;
0454     scpcd_area->request.code = 0x0028;
0455     scpcd_area->m = cd->m;
0456     scpcd_area->fmt1 = cd->fmt;
0457     scpcd_area->cssid = cd->chpid.cssid;
0458     scpcd_area->first_chpid = cd->chpid.id;
0459     scpcd_area->last_chpid = cd->chpid.id;
0460 
0461     ccode = chsc(scpcd_area);
0462     if (ccode != 0) {
0463         ret = -EIO;
0464         goto out_free;
0465     }
0466     if (scpcd_area->response.code != 0x0001) {
0467         ret = -EIO;
0468         CHSC_MSG(0, "scpcd: response code=%x\n",
0469              scpcd_area->response.code);
0470         goto out_free;
0471     }
0472     memcpy(&cd->cpcb, &scpcd_area->response, scpcd_area->response.length);
0473     if (copy_to_user(user_cd, cd, sizeof(*cd)))
0474         ret = -EFAULT;
0475     else
0476         ret = 0;
0477 out_free:
0478     kfree(cd);
0479     free_page((unsigned long)scpcd_area);
0480     return ret;
0481 }
0482 
0483 static int chsc_ioctl_info_cu(void __user *user_cd)
0484 {
0485     struct chsc_cu_cd *cd;
0486     int ret, ccode;
0487     struct {
0488         struct chsc_header request;
0489         u32 : 2;
0490         u32 m : 1;
0491         u32 : 1;
0492         u32 fmt1 : 4;
0493         u32 cssid : 8;
0494         u32 : 8;
0495         u32 first_cun : 8;
0496         u32 : 24;
0497         u32 last_cun : 8;
0498         u32 : 32;
0499         struct chsc_header response;
0500         u8 data[PAGE_SIZE - 20];
0501     } __attribute__ ((packed)) *scucd_area;
0502 
0503     scucd_area = (void *)get_zeroed_page(GFP_KERNEL | GFP_DMA);
0504     if (!scucd_area)
0505         return -ENOMEM;
0506     cd = kzalloc(sizeof(*cd), GFP_KERNEL);
0507     if (!cd) {
0508         ret = -ENOMEM;
0509         goto out_free;
0510     }
0511     if (copy_from_user(cd, user_cd, sizeof(*cd))) {
0512         ret = -EFAULT;
0513         goto out_free;
0514     }
0515     scucd_area->request.length = 0x0010;
0516     scucd_area->request.code = 0x0026;
0517     scucd_area->m = cd->m;
0518     scucd_area->fmt1 = cd->fmt;
0519     scucd_area->cssid = cd->cssid;
0520     scucd_area->first_cun = cd->cun;
0521     scucd_area->last_cun = cd->cun;
0522 
0523     ccode = chsc(scucd_area);
0524     if (ccode != 0) {
0525         ret = -EIO;
0526         goto out_free;
0527     }
0528     if (scucd_area->response.code != 0x0001) {
0529         ret = -EIO;
0530         CHSC_MSG(0, "scucd: response code=%x\n",
0531              scucd_area->response.code);
0532         goto out_free;
0533     }
0534     memcpy(&cd->cucb, &scucd_area->response, scucd_area->response.length);
0535     if (copy_to_user(user_cd, cd, sizeof(*cd)))
0536         ret = -EFAULT;
0537     else
0538         ret = 0;
0539 out_free:
0540     kfree(cd);
0541     free_page((unsigned long)scucd_area);
0542     return ret;
0543 }
0544 
0545 static int chsc_ioctl_info_sch_cu(void __user *user_cud)
0546 {
0547     struct chsc_sch_cud *cud;
0548     int ret, ccode;
0549     struct {
0550         struct chsc_header request;
0551         u32 : 2;
0552         u32 m : 1;
0553         u32 : 5;
0554         u32 fmt1 : 4;
0555         u32 : 2;
0556         u32 ssid : 2;
0557         u32 first_sch : 16;
0558         u32 : 8;
0559         u32 cssid : 8;
0560         u32 last_sch : 16;
0561         u32 : 32;
0562         struct chsc_header response;
0563         u8 data[PAGE_SIZE - 20];
0564     } __attribute__ ((packed)) *sscud_area;
0565 
0566     sscud_area = (void *)get_zeroed_page(GFP_KERNEL | GFP_DMA);
0567     if (!sscud_area)
0568         return -ENOMEM;
0569     cud = kzalloc(sizeof(*cud), GFP_KERNEL);
0570     if (!cud) {
0571         ret = -ENOMEM;
0572         goto out_free;
0573     }
0574     if (copy_from_user(cud, user_cud, sizeof(*cud))) {
0575         ret = -EFAULT;
0576         goto out_free;
0577     }
0578     sscud_area->request.length = 0x0010;
0579     sscud_area->request.code = 0x0006;
0580     sscud_area->m = cud->schid.m;
0581     sscud_area->fmt1 = cud->fmt;
0582     sscud_area->ssid = cud->schid.ssid;
0583     sscud_area->first_sch = cud->schid.sch_no;
0584     sscud_area->cssid = cud->schid.cssid;
0585     sscud_area->last_sch = cud->schid.sch_no;
0586 
0587     ccode = chsc(sscud_area);
0588     if (ccode != 0) {
0589         ret = -EIO;
0590         goto out_free;
0591     }
0592     if (sscud_area->response.code != 0x0001) {
0593         ret = -EIO;
0594         CHSC_MSG(0, "sscud: response code=%x\n",
0595              sscud_area->response.code);
0596         goto out_free;
0597     }
0598     memcpy(&cud->scub, &sscud_area->response, sscud_area->response.length);
0599     if (copy_to_user(user_cud, cud, sizeof(*cud)))
0600         ret = -EFAULT;
0601     else
0602         ret = 0;
0603 out_free:
0604     kfree(cud);
0605     free_page((unsigned long)sscud_area);
0606     return ret;
0607 }
0608 
0609 static int chsc_ioctl_conf_info(void __user *user_ci)
0610 {
0611     struct chsc_conf_info *ci;
0612     int ret, ccode;
0613     struct {
0614         struct chsc_header request;
0615         u32 : 2;
0616         u32 m : 1;
0617         u32 : 1;
0618         u32 fmt1 : 4;
0619         u32 cssid : 8;
0620         u32 : 6;
0621         u32 ssid : 2;
0622         u32 : 8;
0623         u64 : 64;
0624         struct chsc_header response;
0625         u8 data[PAGE_SIZE - 20];
0626     } __attribute__ ((packed)) *sci_area;
0627 
0628     sci_area = (void *)get_zeroed_page(GFP_KERNEL | GFP_DMA);
0629     if (!sci_area)
0630         return -ENOMEM;
0631     ci = kzalloc(sizeof(*ci), GFP_KERNEL);
0632     if (!ci) {
0633         ret = -ENOMEM;
0634         goto out_free;
0635     }
0636     if (copy_from_user(ci, user_ci, sizeof(*ci))) {
0637         ret = -EFAULT;
0638         goto out_free;
0639     }
0640     sci_area->request.length = 0x0010;
0641     sci_area->request.code = 0x0012;
0642     sci_area->m = ci->id.m;
0643     sci_area->fmt1 = ci->fmt;
0644     sci_area->cssid = ci->id.cssid;
0645     sci_area->ssid = ci->id.ssid;
0646 
0647     ccode = chsc(sci_area);
0648     if (ccode != 0) {
0649         ret = -EIO;
0650         goto out_free;
0651     }
0652     if (sci_area->response.code != 0x0001) {
0653         ret = -EIO;
0654         CHSC_MSG(0, "sci: response code=%x\n",
0655              sci_area->response.code);
0656         goto out_free;
0657     }
0658     memcpy(&ci->scid, &sci_area->response, sci_area->response.length);
0659     if (copy_to_user(user_ci, ci, sizeof(*ci)))
0660         ret = -EFAULT;
0661     else
0662         ret = 0;
0663 out_free:
0664     kfree(ci);
0665     free_page((unsigned long)sci_area);
0666     return ret;
0667 }
0668 
0669 static int chsc_ioctl_conf_comp_list(void __user *user_ccl)
0670 {
0671     struct chsc_comp_list *ccl;
0672     int ret, ccode;
0673     struct {
0674         struct chsc_header request;
0675         u32 ctype : 8;
0676         u32 : 4;
0677         u32 fmt : 4;
0678         u32 : 16;
0679         u64 : 64;
0680         u32 list_parm[2];
0681         u64 : 64;
0682         struct chsc_header response;
0683         u8 data[PAGE_SIZE - 36];
0684     } __attribute__ ((packed)) *sccl_area;
0685     struct {
0686         u32 m : 1;
0687         u32 : 31;
0688         u32 cssid : 8;
0689         u32 : 16;
0690         u32 chpid : 8;
0691     } __attribute__ ((packed)) *chpid_parm;
0692     struct {
0693         u32 f_cssid : 8;
0694         u32 l_cssid : 8;
0695         u32 : 16;
0696         u32 res;
0697     } __attribute__ ((packed)) *cssids_parm;
0698 
0699     sccl_area = (void *)get_zeroed_page(GFP_KERNEL | GFP_DMA);
0700     if (!sccl_area)
0701         return -ENOMEM;
0702     ccl = kzalloc(sizeof(*ccl), GFP_KERNEL);
0703     if (!ccl) {
0704         ret = -ENOMEM;
0705         goto out_free;
0706     }
0707     if (copy_from_user(ccl, user_ccl, sizeof(*ccl))) {
0708         ret = -EFAULT;
0709         goto out_free;
0710     }
0711     sccl_area->request.length = 0x0020;
0712     sccl_area->request.code = 0x0030;
0713     sccl_area->fmt = ccl->req.fmt;
0714     sccl_area->ctype = ccl->req.ctype;
0715     switch (sccl_area->ctype) {
0716     case CCL_CU_ON_CHP:
0717     case CCL_IOP_CHP:
0718         chpid_parm = (void *)&sccl_area->list_parm;
0719         chpid_parm->m = ccl->req.chpid.m;
0720         chpid_parm->cssid = ccl->req.chpid.chp.cssid;
0721         chpid_parm->chpid = ccl->req.chpid.chp.id;
0722         break;
0723     case CCL_CSS_IMG:
0724     case CCL_CSS_IMG_CONF_CHAR:
0725         cssids_parm = (void *)&sccl_area->list_parm;
0726         cssids_parm->f_cssid = ccl->req.cssids.f_cssid;
0727         cssids_parm->l_cssid = ccl->req.cssids.l_cssid;
0728         break;
0729     }
0730     ccode = chsc(sccl_area);
0731     if (ccode != 0) {
0732         ret = -EIO;
0733         goto out_free;
0734     }
0735     if (sccl_area->response.code != 0x0001) {
0736         ret = -EIO;
0737         CHSC_MSG(0, "sccl: response code=%x\n",
0738              sccl_area->response.code);
0739         goto out_free;
0740     }
0741     memcpy(&ccl->sccl, &sccl_area->response, sccl_area->response.length);
0742     if (copy_to_user(user_ccl, ccl, sizeof(*ccl)))
0743         ret = -EFAULT;
0744     else
0745         ret = 0;
0746 out_free:
0747     kfree(ccl);
0748     free_page((unsigned long)sccl_area);
0749     return ret;
0750 }
0751 
0752 static int chsc_ioctl_chpd(void __user *user_chpd)
0753 {
0754     struct chsc_scpd *scpd_area;
0755     struct chsc_cpd_info *chpd;
0756     int ret;
0757 
0758     chpd = kzalloc(sizeof(*chpd), GFP_KERNEL);
0759     scpd_area = (void *)get_zeroed_page(GFP_KERNEL | GFP_DMA);
0760     if (!scpd_area || !chpd) {
0761         ret = -ENOMEM;
0762         goto out_free;
0763     }
0764     if (copy_from_user(chpd, user_chpd, sizeof(*chpd))) {
0765         ret = -EFAULT;
0766         goto out_free;
0767     }
0768     ret = chsc_determine_channel_path_desc(chpd->chpid, chpd->fmt,
0769                            chpd->rfmt, chpd->c, chpd->m,
0770                            scpd_area);
0771     if (ret)
0772         goto out_free;
0773     memcpy(&chpd->chpdb, &scpd_area->response, scpd_area->response.length);
0774     if (copy_to_user(user_chpd, chpd, sizeof(*chpd)))
0775         ret = -EFAULT;
0776 out_free:
0777     kfree(chpd);
0778     free_page((unsigned long)scpd_area);
0779     return ret;
0780 }
0781 
0782 static int chsc_ioctl_dcal(void __user *user_dcal)
0783 {
0784     struct chsc_dcal *dcal;
0785     int ret, ccode;
0786     struct {
0787         struct chsc_header request;
0788         u32 atype : 8;
0789         u32 : 4;
0790         u32 fmt : 4;
0791         u32 : 16;
0792         u32 res0[2];
0793         u32 list_parm[2];
0794         u32 res1[2];
0795         struct chsc_header response;
0796         u8 data[PAGE_SIZE - 36];
0797     } __attribute__ ((packed)) *sdcal_area;
0798 
0799     sdcal_area = (void *)get_zeroed_page(GFP_KERNEL | GFP_DMA);
0800     if (!sdcal_area)
0801         return -ENOMEM;
0802     dcal = kzalloc(sizeof(*dcal), GFP_KERNEL);
0803     if (!dcal) {
0804         ret = -ENOMEM;
0805         goto out_free;
0806     }
0807     if (copy_from_user(dcal, user_dcal, sizeof(*dcal))) {
0808         ret = -EFAULT;
0809         goto out_free;
0810     }
0811     sdcal_area->request.length = 0x0020;
0812     sdcal_area->request.code = 0x0034;
0813     sdcal_area->atype = dcal->req.atype;
0814     sdcal_area->fmt = dcal->req.fmt;
0815     memcpy(&sdcal_area->list_parm, &dcal->req.list_parm,
0816            sizeof(sdcal_area->list_parm));
0817 
0818     ccode = chsc(sdcal_area);
0819     if (ccode != 0) {
0820         ret = -EIO;
0821         goto out_free;
0822     }
0823     if (sdcal_area->response.code != 0x0001) {
0824         ret = -EIO;
0825         CHSC_MSG(0, "sdcal: response code=%x\n",
0826              sdcal_area->response.code);
0827         goto out_free;
0828     }
0829     memcpy(&dcal->sdcal, &sdcal_area->response,
0830            sdcal_area->response.length);
0831     if (copy_to_user(user_dcal, dcal, sizeof(*dcal)))
0832         ret = -EFAULT;
0833     else
0834         ret = 0;
0835 out_free:
0836     kfree(dcal);
0837     free_page((unsigned long)sdcal_area);
0838     return ret;
0839 }
0840 
0841 static long chsc_ioctl(struct file *filp, unsigned int cmd,
0842                unsigned long arg)
0843 {
0844     void __user *argp;
0845 
0846     CHSC_MSG(2, "chsc_ioctl called, cmd=%x\n", cmd);
0847     if (is_compat_task())
0848         argp = compat_ptr(arg);
0849     else
0850         argp = (void __user *)arg;
0851     switch (cmd) {
0852     case CHSC_START:
0853         return chsc_ioctl_start(argp);
0854     case CHSC_START_SYNC:
0855         return chsc_ioctl_start_sync(argp);
0856     case CHSC_INFO_CHANNEL_PATH:
0857         return chsc_ioctl_info_channel_path(argp);
0858     case CHSC_INFO_CU:
0859         return chsc_ioctl_info_cu(argp);
0860     case CHSC_INFO_SCH_CU:
0861         return chsc_ioctl_info_sch_cu(argp);
0862     case CHSC_INFO_CI:
0863         return chsc_ioctl_conf_info(argp);
0864     case CHSC_INFO_CCL:
0865         return chsc_ioctl_conf_comp_list(argp);
0866     case CHSC_INFO_CPD:
0867         return chsc_ioctl_chpd(argp);
0868     case CHSC_INFO_DCAL:
0869         return chsc_ioctl_dcal(argp);
0870     case CHSC_ON_CLOSE_SET:
0871         return chsc_ioctl_on_close_set(argp);
0872     case CHSC_ON_CLOSE_REMOVE:
0873         return chsc_ioctl_on_close_remove();
0874     default: /* unknown ioctl number */
0875         return -ENOIOCTLCMD;
0876     }
0877 }
0878 
0879 static atomic_t chsc_ready_for_use = ATOMIC_INIT(1);
0880 
0881 static int chsc_open(struct inode *inode, struct file *file)
0882 {
0883     if (!atomic_dec_and_test(&chsc_ready_for_use)) {
0884         atomic_inc(&chsc_ready_for_use);
0885         return -EBUSY;
0886     }
0887     return nonseekable_open(inode, file);
0888 }
0889 
0890 static int chsc_release(struct inode *inode, struct file *filp)
0891 {
0892     char dbf[13];
0893     int ret;
0894 
0895     mutex_lock(&on_close_mutex);
0896     if (!on_close_chsc_area)
0897         goto out_unlock;
0898     init_completion(&on_close_request->completion);
0899     CHSC_LOG(0, "on_close");
0900     chsc_log_command(on_close_chsc_area);
0901     spin_lock_irq(&chsc_lock);
0902     ret = chsc_async(on_close_chsc_area, on_close_request);
0903     spin_unlock_irq(&chsc_lock);
0904     if (ret == -EINPROGRESS) {
0905         wait_for_completion(&on_close_request->completion);
0906         ret = chsc_examine_irb(on_close_request);
0907     }
0908     snprintf(dbf, sizeof(dbf), "relret:%d", ret);
0909     CHSC_LOG(0, dbf);
0910     free_page((unsigned long)on_close_chsc_area);
0911     on_close_chsc_area = NULL;
0912     kfree(on_close_request);
0913     on_close_request = NULL;
0914 out_unlock:
0915     mutex_unlock(&on_close_mutex);
0916     atomic_inc(&chsc_ready_for_use);
0917     return 0;
0918 }
0919 
0920 static const struct file_operations chsc_fops = {
0921     .owner = THIS_MODULE,
0922     .open = chsc_open,
0923     .release = chsc_release,
0924     .unlocked_ioctl = chsc_ioctl,
0925     .compat_ioctl = chsc_ioctl,
0926     .llseek = no_llseek,
0927 };
0928 
0929 static struct miscdevice chsc_misc_device = {
0930     .minor = MISC_DYNAMIC_MINOR,
0931     .name = "chsc",
0932     .fops = &chsc_fops,
0933 };
0934 
0935 static int __init chsc_misc_init(void)
0936 {
0937     return misc_register(&chsc_misc_device);
0938 }
0939 
0940 static void chsc_misc_cleanup(void)
0941 {
0942     misc_deregister(&chsc_misc_device);
0943 }
0944 
0945 static int __init chsc_sch_init(void)
0946 {
0947     int ret;
0948 
0949     ret = chsc_init_dbfs();
0950     if (ret)
0951         return ret;
0952     isc_register(CHSC_SCH_ISC);
0953     ret = chsc_init_sch_driver();
0954     if (ret)
0955         goto out_dbf;
0956     ret = chsc_misc_init();
0957     if (ret)
0958         goto out_driver;
0959     return ret;
0960 out_driver:
0961     chsc_cleanup_sch_driver();
0962 out_dbf:
0963     isc_unregister(CHSC_SCH_ISC);
0964     chsc_remove_dbfs();
0965     return ret;
0966 }
0967 
0968 static void __exit chsc_sch_exit(void)
0969 {
0970     chsc_misc_cleanup();
0971     chsc_cleanup_sch_driver();
0972     isc_unregister(CHSC_SCH_ISC);
0973     chsc_remove_dbfs();
0974 }
0975 
0976 module_init(chsc_sch_init);
0977 module_exit(chsc_sch_exit);